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DETAILED ACTION 

Response to Arguments 

Applicant's arguments with respect to claims 1-28 have been considered but are moot in 
view of the new ground(s) of rejection. 

Claim Rejections - 35 USC § 101 
35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 
matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 

Claims 8-13 and 24-28 are rejected under 35 U.S.C. 101 because the claimed invention 
is directed to non-statutory subject matter. Claims 8-13 disclose a computer readable 
medium defined as a carrier wave, (see Specifications Par 0031) 

Claims 24-28 define a means defined as being a software only implementation, (see 
Specifications Par. 0028) 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented 
and the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

Claims 1-2, 7-9, 24-26 are rejected under 35 U.S.C. 102(b) as being anticipated by 
RFC 3244-Microsoft Windows 2000 Kerberos Change Password and Set Password 
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Protocols by Swift et al. (hereinafter Swift) in view of US Patent Publication 
2004/0205331 to Hussain et al. (hereinafter Hussain). 

Regarding Claim 1 , Swift discloses the receiving a encryption algorithm request wherein 
the request specifies an encryption algorithm for subsequent communications between 
client and server see Page 2 "Request Message" protocol version number; sending a 
subsession key to the client, wherein the subsession key may be used in conjunction 
with encryption algorithm to encrypt future messages see Page 3 " Reply Message" AP- 
REP data. But Swift does not explicitly disclose the negotiating of encryption algorithms. 
However, Hussain discloses the negotiating of encryption schemes see Par. 0006 & 
Fig. 1 item 105. It would be obvious to one having ordinary skill in the art at the time of 
the invention to include the negotiating encryption schemes in the invention of Swift in 
order to take into account for the speed, cost, memory considerations see Hussain see 
Par. 0028. 

Regarding Claim 2, Swift discloses the sending and receiving as part of a authentication 
protocol see Page 3 Par. 1 . 

Regarding Claim 7, Swift discloses the deriving of algorithm from key see Page 3 Par. 2 
"The newpasswd 
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Regarding Claim 8, Swift disclose sending an encryption algorithm request to server 
indicating that a client computer supports a specified encryption algorithms see Page 4 
"KRB5_KPASSWD_BAD_VERSION"; anticipating a subsession key with encryption 
algorithms see Page 2 "Request Message"; switching to specified algorithm if the 
subsession key is delivered see Page 3 "AP-REP data" & Page 2 "AP-REQ data". 

Regarding Claim 9, Swift discloses the authenticating a server computer see Page 2 
"KRB_PRIV message". 

Regarding Claim 24, Swift discloses the receiving a encryption algorithm request 
wherein the request specifies an encryption algorithm for subsequent communications 
between client and server see Page 2 "Request Message" protocol version number and 
sending and receiving as part of a authentication protocol see Page 3 Par. 1 ; the 
switching to specified algorithm if the subsession key is delivered see Page 3 "AP-REP 
data" & Page 2 "AP-REQ data. But Swift does not explicitly disclose the negotiating of 
encryption algorithms. However, Hussain discloses the negotiating of encryption 
schemes see Par. 0006 & Fig. 1 item 105. It would be obvious to one having ordinary 
skill in the art at the time of the invention to include the negotiating encryption schemes 
in the invention of Swift in order to take into account for the speed, cost, memory 
considerations see Hussain see Par. 0028. 
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Regarding Claim 25-26, Swift discloses the encrypting of AP-REQ using an algorithm 
see Page 3 Par. 1 . 

Claims 3-6,10-13, 15-18 , 21-23, 27-28 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over RFC 3244-Microsoft Windows 2000 Kerberos Change Password and 
Set Password Protocols by Swift et al. (hereinafter Swift) in view of US Patent 
Publication 2004/0205331 to Hussain et al. (hereinafter Hussain) further in rpcsec_gss, 
kadmin service principal, etc by Coffman, Kevin. 

Regarding Claim 3, 10, 23, 27, Swift nor Hussain discloses the gss interface for 
authentication protocol. However, Coffman discloses the gss interface for 
authentication protocol see Page 1 Par. 3 "The kpasswd...". It would be obvious to one 
having ordinary skill in the art at the time of the invention to include the GSSAPI in the 
invention of Swift in order to include the protocol in a package or suite akin to RPC. 

Regarding Claim 4,11, Swift discloses the AP-REQ see Page 2- The Protocol Par. 1 . 

Regarding Claim 5-6, 12-13, 22, Swift discloses the encrypting of AP-REQ using an 
algorithm see Page 3 Par. 1 . 

Regarding Claim 15, Swift discloses the receiving a encryption algorithm request 
wherein the request specifies an encryption algorithm for subsequent communications 
between client and server see Page 2 "Request Message" protocol version number; the 
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authenticating a server computer see Page 2 "KRB_PRIV message"; client computer 
supports a specified encryption algorithms see Page 4 

"KRB5_KPASSWD_BAD_VERSION". Swift nor Hussain discloses the gss interface for 
authentication protocol. However, Coffman discloses the gss interface for 
authentication protocol see Page 1 Par. 3 "The kpasswd...". It would be obvious to one 
having ordinary skill in the art at the time of the invention to include the GSSAPI in the 
invention of Swift in order to include the protocol in a package or suite akin to RPC. But 
Swift does not explicitly disclose the negotiating of encryption algorithms. However, 
Hussain discloses the negotiating of encryption schemes see Par. 0006 & Fig. 1 item 
1 05. It would be obvious to one having ordinary skill in the art at the time of the 
invention to include the negotiating encryption schemes in the invention of Swift in order 
to take into account for the speed, cost, memory considerations see Hussain see Par. 
0028. 

Regarding Claim 16-17, Swift discloses the deriving of algorithm from key see Page 3 
Par. 2 "The newpasswd 

Regarding Claim 18, Swift discloses the switching to specified algorithm if the 
subsession key is delivered see Page 3 "AP-REP data" & Page 2 "AP-REQ data". 

Regarding Claim 21 , Swift discloses the sending and receiving as part of a 
authentication protocol see Page 3 Par. 1 . 
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Regarding Claim 28, Swift discloses the flag in a checksum see Page 2 KRB-PRIV. 
Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Venkat Perungavoor whose telephone number is 
(571 )272-721 3. The examiner can normally be reached on 8:30-5:00. If attempts to 
reach the examiner by telephone are unsuccessful, the examiner's supervisor, Gilberto 
Barron can be reached on 571-272-3799. The fax phone number for the organization 
where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published 
applications may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through Private PAIR only. For 
more information about the PAIR system, see http://pair-direct.uspto.gov. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a USPTO 
Customer Service Representative or access to the automated information system, call 
800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/V. P.I 

Examiner, Art Unit 2132 
July 28, 2008 
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